$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a557f53-7f57-312a-a4b9-7caaba2d2632.roa File: 1a557f53-7f57-312a-a4b9-7caaba2d2632.roa (raw, json) Hash identifier: Cn7SzUeVbfqVl3GAT2b1lZYnaGsUV2G0sTxFfZG3olo= Subject key identifier: 14:A1:13:2C:F8:38:91:24:10:4E:A9:0B:E7:93:8C:DA:90:66:CD:54 Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Certificate serial: 010D0C9F4328584B95A8D722F5F93A9101DC5705 Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a557f53-7f57-312a-a4b9-7caaba2d2632.roa Signing time: Mon 20 Oct 2025 13:00:38 +0000 ROA not before: Mon 20 Oct 2025 13:00:38 +0000 ROA not after: Sun 18 Jan 2026 14:00:38 +0000 asID: 33668 IP address blocks: 68.61.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:95:a8:d7:22:f5:f9:3a:91:01:dc:57:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6 Validity Not Before: Oct 20 13:00:38 2025 GMT Not After : Jan 18 14:00:38 2026 GMT Subject: CN=16eaca57-4cc2-405c-804d-5dd1feebaedd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:14:f6:bb:a7:a0:7a:d2:cd:25:64:83:89:6e: df:6c:60:5f:f7:95:86:34:ff:91:0b:52:24:80:9a: 49:c8:6e:82:75:bb:20:fe:d2:b0:2e:fa:bb:cf:3c: 51:44:dd:2b:ea:27:06:94:e2:bd:3a:2a:9c:03:6d: 30:20:17:c9:c6:9b:93:af:fa:4a:19:1c:d8:98:df: 9c:1a:08:a4:81:e6:43:39:0d:b4:60:bf:26:a6:73: 88:1e:34:54:27:9b:73:43:03:fd:73:76:80:0f:19: 92:8d:3f:62:9c:d4:a3:bb:2e:1b:19:d3:1f:e2:bd: bb:24:13:f4:3b:af:54:65:79:cb:d4:b1:07:d5:c4: 57:61:ad:1a:8e:64:78:bf:eb:c1:f9:b3:b2:70:6e: 5b:ea:c8:b9:b7:ff:3e:34:57:f0:91:a0:73:35:77: a7:e2:f7:92:19:0b:5b:af:fe:e7:7e:cb:82:64:ac: c0:39:90:b4:10:0d:b8:36:b6:38:03:4d:8f:6b:e8: 05:a0:83:bf:ec:84:0a:20:2d:ad:8b:83:7d:de:fe: 55:4c:a6:67:d6:a5:24:0e:e9:f3:07:d9:a0:eb:98: 24:14:aa:0b:6d:6f:1b:85:51:a0:5e:49:3f:c7:87: 02:f8:28:c5:0d:db:32:39:fe:4b:7b:a2:a7:20:7c: d3:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:A1:13:2C:F8:38:91:24:10:4E:A9:0B:E7:93:8C:DA:90:66:CD:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a557f53-7f57-312a-a4b9-7caaba2d2632.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl X509v3 Authority Key Identifier: keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer sbgp-ipAddrBlock: critical IPv4: 68.61.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:57:f5:3e:30:0e:aa:a7:65:a2:87:8d:c5:4e:8e:95:cf:14: 7e:78:78:8b:a1:05:a2:57:06:1c:a2:8d:dc:79:a0:87:17:9d: 46:9b:67:6c:26:84:a6:27:f5:26:ce:18:80:a2:6f:c8:e5:c2: 24:39:cf:eb:98:45:08:f7:5b:51:13:4f:3e:88:0e:1e:81:8d: 59:25:ee:29:95:cc:22:96:8e:52:a4:7d:23:ca:45:e3:3a:5c: 49:5a:39:f1:87:d2:5f:14:c1:37:a1:18:ef:5e:a4:10:f9:b1: 56:92:c8:36:08:5b:eb:7a:ab:db:39:79:1a:65:fc:a7:3e:a0: a7:8c:fe:12:93:97:82:de:10:d8:23:9e:ed:9e:ba:a8:b9:3a: 90:f2:b1:ef:0c:d2:6e:16:60:f6:f4:0c:c4:58:58:af:5d:9b: 9b:b0:8b:ed:2b:c7:bd:18:f4:18:f5:62:11:36:f8:35:22:57: 3c:b3:86:55:00:b0:cb:39:ac:4c:ae:a9:d4:41:3e:ca:29:2a: 97:21:40:ff:65:8c:46:d1:4c:5c:9d:a0:47:07:f3:0d:19:ec: 38:4a:36:3e:1b:58:6d:88:25:f3:04:e0:2f:d0:36:ed:68:eb: f7:cc:44:9a:e5:e4:61:6f:70:58:06:76:b6:75:5f:6c:40:cb: 58:5b:bd:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuVqNci9fk6kQHcVwUwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1 NGY2MB4XDTI1MTAyMDEzMDAzOFoXDTI2MDExODE0MDAzOFowLzEtMCsGA1UEAxMk MTZlYWNhNTctNGNjMi00MDVjLTgwNGQtNWRkMWZlZWJhZWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9xT2u6egetLNJWSDiW7fbGBf95WGNP+RC1Ik gJpJyG6Cdbsg/tKwLvq7zzxRRN0r6icGlOK9OiqcA20wIBfJxpuTr/pKGRzYmN+c GgikgeZDOQ20YL8mpnOIHjRUJ5tzQwP9c3aADxmSjT9inNSjuy4bGdMf4r27JBP0 O69UZXnL1LEH1cRXYa0ajmR4v+vB+bOycG5b6si5t/8+NFfwkaBzNXen4veSGQtb r/7nfsuCZKzAOZC0EA24NrY4A02Pa+gFoIO/7IQKIC2ti4N93v5VTKZn1qUkDunz B9mg65gkFKoLbW8bhVGgXkk/x4cC+CjFDdsyOf5Le6KnIHzTcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBShEyz4OJEkEE6pC+eTjNqQZs1UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1 YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWE1NTdmNTMtN2Y1Ny0z MTJhLWE0YjktN2NhYWJhMmQyNjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5 ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRD1EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1X9T4wDqqnZaKHjcVOjpXPFH54eIuhBaJXBhyijdx5oIcXnUabZ2wm hKYn9SbOGICib8jlwiQ5z+uYRQj3W1ETTz6IDh6BjVkl7imVzCKWjlKkfSPKReM6 XElaOfGH0l8UwTehGO9epBD5sVaSyDYIW+t6q9s5eRpl/Kc+oKeM/hKTl4LeENgj nu2euqi5OpDyse8M0m4WYPb0DMRYWK9dm5uwi+0rx70Y9Bj1YhE2+DUiVzyzhlUA sMs5rEyuqdRBPsopKpchQP9ljEbRTFydoEcH8w0Z7DhKNj4bWG2IJfME4C/QNu1o 6/fMRJrl5GFvcFgGdrZ1X2xAy1hbvZs= -----END CERTIFICATE-----Generated at Mon Oct 20 15:54:32 2025 by rpki-client